Let's Encrypt to add two remote perspectives to domain validation
Validation requests will rise from five to seven per check, with testing set for October 27 and a production rollout planned for November 10, 2026.
Let's Encrypt plans to add two new remote perspectives to its domain validation process, according to a post on Let's Encrypt Community Support. This piece is based on that single post.
During domain validation, Let's Encrypt will make seven validation requests in total. One will come from its primary datacenter and six from remote perspectives, up from four. For validation to succeed, the primary server and a quorum of remote perspectives must receive the correct challenge response.
The post said the new regions will be tested in the staging environment starting Tuesday, October 27, 2026. If that goes well, the production rollout is planned for Tuesday, November 10, 2026. Let's Encrypt said it would post updates in the same community thread.
“We expect little to no impact to users.”Let's Encrypt, in its community post
The post gave two reasons for the change. The first is security. Let's Encrypt said that more perspectives give stronger domain validation security and that wider coverage "improves visibility and protection against BGP attacks." It added that the change "makes it more difficult for attackers to hijack validation requests."
The second reason is compliance. The post quoted section 3.2.2.9 of the Baseline Requirements, which covers what it calls Multi-Perspective Issuance Corroboration. According to the quoted text, starting December 15, 2026, a certificate authority must use at least five remote Network Perspectives. The remote perspectives that confirm the primary one must fall within the service regions of at least two distinct Regional Internet Registries. If those requirements are not met, the text says the certificate authority "MUST NOT proceed with issuance of the Certificate."
The planned November rollout would come about five weeks before that deadline.
Several details are not in the post. It does not say where the two new perspectives will be located or which Regional Internet Registry regions they will fall in. It also does not say how many of the six remote perspectives will make up a quorum. The quoted requirement refers to a Quorum Requirements Table, but the table's contents were not included.
The post also does not explain what "little to no impact" could mean in practice for users. It does not say what would happen to the November 10 date if problems come up during staging, other than that the production rollout depends on testing going well.
The post pointed readers to an earlier Let's Encrypt blog post, from when it first added new perspectives, for more on multi-perspective domain validation.
